In the Linux kernel, the following vulnerability has been resolved:

net: bcmgenet: restore the hardware filters on open

bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops every rule off the list, and bcmgenet_open() calls it on each ifup. Every rule the user configured is silently lost:

ethtool -N eth0 flow-type ether dst $MAC action 0

Added rule with ID 0

ethtool -n eth0 | grep -c Filter:

1

ip link set eth0 down && ip link set eth0 up

ethtool -n eth0 | grep -c Filter:

0

Initialise the lists once at probe and restore the rules on open, as bcmgenet_resume() already does.